Detection Engineer: Build Enterprise Threat Detections

Boston Consulting Group (BCG); Lisboa; Presencial; EUR 65 000 - 90 000; Tempo integral

Resumo da oferta

Boston Consulting Group seeks an experienced Detection Engineer to build and mature its global detection capability. You will translate threat intelligence and offensive findings into production-ready detections, working with CSIRT, Security Engineering, and MSP partners to ensure high fidelity and rapid response.

In this role you will develop detection rules across SIEM/EDR platforms, validate telemetry, and contribute to ATT&CK coverage.

Qualificações

• Experience developing and maintaining production detection rules across enterprise security platforms.
• Strong knowledge of MITRE ATT&CK and translating adversary techniques into effective detections.
• Advanced proficiency with Splunk SPL or similar query languages for security detection engineering.
• Understanding of offensive security techniques and validating detections through purple teaming or atomic testing.
• Strong analytical skills and ability to make decisions with evolving information.
• Experience collaborating with Security Operations, Incident Response, Engineering, and other technical teams.

Responsabilidades

• Collaborate with Detection Engineering, CSIRT, Security Engineering and MSP to develop, validate, and improve detection content.
• Develop and maintain detection rules using SIEM, EDR, and other enterprise security platforms.
• Translate red team exercises, threat intel, and operational feedback into production-ready detections.
• Validate detections against telemetry before deployment to ensure accuracy and effectiveness.
• Tune detection content to improve fidelity and reduce false positives.
• Contribute to ATT&CK coverage by identifying detection gaps and creating detections.
• Develop investigation guidance and runbooks for consistent triage across CSIRT and MSP.
• Partner with Security Engineering to ensure telemetry supports effective detection development.
• Maintain detection documentation and lifecycle per standards.

Conhecimentos

Detection engineering

MITRE ATT&CK

Splunk SPL

Purple teaming

Telemetry understanding

Collaboration

Documentation discipline

Ferramentas

SIEM

EDR

Security platforms

Descrição da oferta de emprego

Boston Consulting Group seeks an experienced Detection Engineer to build and mature its global detection capability. You will translate threat intelligence and offensive findings into production-ready detections, working with CSIRT, Security Engineering, and MSP partners to ensure high fidelity and rapid response.

In this role you will develop detection rules across SIEM/EDR platforms, validate telemetry, and contribute to ATT&CK coverage.